CVE-2024-40766 SonicWall SonicOS Improper Access Control
Attackers can access unauthorized resources or crash SonicWall firewalls due to improper access control in management interfaces.
- Exploited in the wild
- Since 9 Sep 2024
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-40766?
CVE-2024-40766 is a critical missing authorization vulnerability in Sonicwall Sonicos, published on 23 Aug 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.
Weakness: CWE-284
Which versions are affected by CVE-2024-40766?
It affects 1 product.
Products include Sonicwall Sonicos.
How do I fix CVE-2024-40766?
No fix has been published for CVE-2024-40766 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 30 Sep 2024.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2024-40766 being exploited?
Yes. Attackers have exploited CVE-2024-40766 in the wild since at least 9 Sep 2024, including in ransomware campaigns.
Other vulnerabilities in Sonicwall Sonicos
Sources
Also known as GHSA-8736-pr6r-r9hr.